.

[duall]

DELETE THIS

[m4rx]

1st: sorry to break your heart but the hash ain't MD5

 

2nd:

test1113; INSERT INTO `user_auth` (`account`,`password`) VALUES (`3698775411144`,`81dc9bdb52d04dc20036dbd8313ed055`)--

This is wrong a correct one would be

test1113'; etc...

do you see the ' ? it's necessary or else your query will fail.

 

3rd: with that query you'd be inserting, not updating with is what you want to do.

[lostos]

490020006400690064006E0027007400200075006E006400650072007300740061006E00640020004100

4E0059005400480049004E004700210021002000410072006500200079006F0075002000740072007900

69006E0067002000530051004C00200049006E006A0065006300740069006F006E00200069006E002000

610020007200650061007400610069006C0020007300650072007600650072003F002000540068006500

6E0020007400680069007300200073006900740065002000690073002000610020006200690074002000

69006E0061007000700072006F007000720069006100740065002E00200047006F002000660069006E00

64002000610020006D006F0072006500200061006400760061006E00630065006400200066006F007200

75006D00200070006C007A002E000000 (HEX)

[m4rx]

No lostos I don't think he's talking about official server... he's just talking about some l2off server where he thinks he can SQL inject...^^

[lostos]

yeah duall's thought makes some sense, however, you can only be given a new password for the victim's acc as the passwords are encrypted and cannot be retrieved, so, I don't know if this would work.

[duall]

.

[duall]

.